Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5CB51E18514E11EEAEF9A94EC4F9AE02.roa
File: 5CB51E18514E11EEAEF9A94EC4F9AE02.roa (raw, json)
Hash identifier: H8m6mR0F0asa0vHb7dFuFT9Nz/fHl3PO1abcrr5i01I=
Subject key identifier: 90:02:CA:5A:8D:0C:C2:57:15:95:58:D8:07:2B:71:D5:4C:DE:38:9F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7A1D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5CB51E18514E11EEAEF9A94EC4F9AE02.roa
Signing time: Tue 12 Sep 2023 09:25:50 +0000
ROA not before: Tue 12 Sep 2023 09:25:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150604
IP address blocks: 103.181.84.0/23 maxlen: 24
103.187.92.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31261 (0x7a1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 12 09:25:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65002e9e-751c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ac:39:bb:5e:9c:12:85:e5:47:d8:59:fe:7d:
67:d6:f2:5f:71:9b:39:e0:92:de:d3:95:95:db:65:
c5:87:c3:1e:5e:1c:c8:c4:b7:f5:7e:64:47:ac:1b:
ba:25:3d:fc:f4:fb:e2:0d:dc:33:93:bb:83:59:5d:
94:ed:97:27:b5:ca:dc:08:76:27:38:8a:e5:68:84:
27:92:4e:d9:ea:9b:7e:d0:b8:df:40:72:27:b7:26:
d1:1b:ec:2b:96:20:a6:1f:96:0d:b9:ea:9e:95:e1:
9e:f0:7e:74:75:7d:32:00:ad:c9:03:0e:ce:48:fb:
59:9e:61:e6:b1:2b:7f:5c:c8:33:43:30:03:db:d4:
11:a5:e8:23:cc:af:38:51:b0:92:d1:af:37:d9:69:
68:4f:67:49:dd:39:41:7c:fb:c7:6f:d4:41:dd:84:
14:39:44:99:f4:da:83:09:dd:ac:64:8e:5d:f6:d5:
19:f3:30:d2:ee:2d:95:90:58:23:58:0b:da:aa:ab:
ba:8b:26:85:6a:67:9e:74:a3:ea:72:cd:e2:53:50:
e4:4e:c4:9d:c1:eb:99:83:0b:90:65:c0:67:ab:93:
27:77:dc:01:0b:59:c4:5c:98:17:cc:05:7e:50:a5:
fd:ff:e0:e6:40:ff:9a:7c:57:d1:b2:f2:9e:f2:68:
b7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:02:CA:5A:8D:0C:C2:57:15:95:58:D8:07:2B:71:D5:4C:DE:38:9F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5CB51E18514E11EEAEF9A94EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.181.84.0/23
103.187.92.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:c8:40:16:d8:17:fc:23:86:db:4d:ab:b7:80:0f:93:88:66:
49:a3:7c:48:78:fc:a9:76:2a:2b:d8:bf:71:19:68:e0:8c:38:
07:51:3b:cc:f9:70:a8:36:b3:da:cc:30:16:db:2c:06:2e:a5:
6b:ff:6c:fd:1b:af:7a:b1:a6:50:97:d0:2f:0f:1d:e8:b7:73:
12:21:8c:ae:0d:d2:c1:51:7f:7c:35:72:c3:dd:12:53:8d:fc:
b5:25:df:29:ee:ca:f4:0d:6f:5a:5e:16:2f:8f:67:76:fd:18:
ef:0e:50:ed:9f:0d:1f:f7:54:22:80:7e:fc:dc:b0:8c:18:76:
b0:2a:3b:86:fa:3d:ea:2c:18:fe:a1:0e:42:f7:2f:e6:ba:20:
d9:7e:06:69:0b:b9:52:4f:3d:f8:fa:b2:24:fc:07:72:76:7a:
b7:59:f9:14:93:c5:03:60:fa:4a:cf:91:52:99:0d:43:9c:96:
9a:f3:38:a2:84:4f:a1:a8:11:27:28:c5:7d:ea:8a:79:b7:f3:
dd:1f:ab:8f:62:68:62:d8:a5:8d:01:7d:88:a3:c1:5d:7b:34:
1c:71:21:b6:23:c0:f1:82:c6:09:e8:85:23:1f:cf:21:27:27:
90:b4:94:c4:06:ce:c4:01:1b:35:e1:90:10:fe:32:04:4e:18:
21:aa:5b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 20 07:32:52 2023 by rpki-client on console-ams.rpki-client.org